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Ellipsoids have traditionally played an important role in the study of convex bodies. The classical Lowner- 
CN " John ellipsoid, for instance, is the starting point for many interesting studies. To recall John's theorem, for 

^ ■ any convex body K in W 1 , there is an ellipsoid E with centroid xo such that 

QV x + E C K C x + 
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Abstract 

We give a deterministic 2°' n ) algorithm for computing an M-ellipsoid of a convex body, matching a 
known lower bound. This has several interesting consequences including improved deterministic algo- 
rithms for volume estimation of convex bodies and for the shortest and closest lattice vector problems 
under general norms. 

1 Introduction 



In fact, this bound is achieved by the maximum volume ellipsoid contained in K. 

Ellipsoids have also been critical to the design and analysis of efficient algorithms. The most notable 
example is the ellipsoid algorithm IB 13 for linear [3 ] and convex optimization J4]], which represents a fron- 
tier of polynomial-time solvability. For the basic problems of sampling and integration in high dimension, 
the inertial ellipsoid defined by the covariance matrix of a distribution is an important ingredient of efficient 
algorithms |5j|6j|3. This ellipsoid also achieves the bounds of John's theorem for general convex bodies 
(for centrally-symmetric convex bodies, the max-volume ellipsoid achieves the best possible sandwiching 
ratio of y/n while the inertial ellipsoid could still have a ratio of n). 

Another ellipsoid that has played a critical role in the development of modern convex geometry is the 
M-ellipsoid (Milman's ellipsoid). This object was introduced by Milman as a tool to prove fundamental 
inequalities in convex geometry (see e.g., Chapter 7 of (8)). An M-ellipsoid E of a convex body K has small 
covering numbers with respect to K. We let N(A, B) denote the number of translations of B required to 
cover A. Then, as shown by Milman, every convex body K has an ellipsoid E for which N(K, E)N(E, K) 
is bounded by 2°( n \ This is the best possible bound up to a constant in the exponent. In contrast, the John 
ellipsoid can have this covering bound as high as n n ^ n \ The existence of M-ellipsoids now has several 
proofs in the literature by Milman J9), multiple proofs by Pisier [8], and most recently, by Klartag iflOl . 
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The complexity of computing these ellipsoids is interesting for its own sake, but also due to several 
important consequences that we will discuss presently. John ellipsoids are hard to compute, but their sand- 
wiching bounds can be approximated deterministically to within 0(y/n) in polynomial time. Inertial ellip- 
soids can be approximated to arbitrary accuracy by random sampling in polynomial time. Algorithms for 
M-ellipsoids have been considered only recently. The proof of Klartag [ 10] gives a randomized polynomial- 
time algorithm |TT). In lfl2l . we give a deterministic 0(logra) n time and poly(n)-space algorithm to com- 
pute the ^-ellipsoid of any convex body. The ^-ellipsoid yields an approximation to the M-ellipsoid, where 
the product of covering estimates is 0(log n) n instead of the best possible bound of 2°( n \ It has been open 
to give a deterministic algorithm for constructing an M-ellipsoid that achieves optimal covering bounds. The 
extent to which randomness is essential for efficiency is a very interesting question in general, and specif- 
ically for problems on convex bodies where separations between randomized and deterministic complexity 
are known in the general oracle model Ifl3l[l4"ll . Here we address the question of deterministic M-ellipsoid 
construction and consider its algorithmic consequences for volume estimation and for fundamental lattice 
problems, namely the Shortest Vector Problem (SVP) and Closest Vector Problem (CVP). 

The core new result of this paper is a deterministic 2°( n > algorithm for computing an M-ellipsoid of a 
convex body in the oracle model [4]. Moreover, there is a 2 n ( n > lower bound for deterministic algorithms, 
so this is the best possible up to a constant in the exponent. We state this result formally, then proceed to its 
consequences and a nearly matching lower bound. 

Theorem 1.1. There is a deterministic algorithm that, given any convex body K C W 1 specified by a 
membership oracle, finds an ellipsoid E such that N(K, E)N(E, K) < 2°( n \ The time complexity of the 
algorithm (oracle calls and arithmetic operations) is 2°^ and its space complexity is polynomial in n. 

The first consequence is for estimating the volume of a convex body. This is an ancient problem that 
has lead to many insights in algorithmic techniques, high-dimensional geometry and probability theory. One 
one hand, the problem can be solved for any convex body presented in the general membership oracle model 
in randomized polynomial time to arbitrary accuracy fl31l . On the other hand, the following lower bound 
(improving on [16]) shows that deterministic algorithms cannot achieve such approximations. 

Theorem 1.2. H13\l Suppose there is a deterministic algorithm that takes a convex body K as input and 
outputs A(K), B(K) such that A(K) < vo\(K) < B(K) and makes at most n a calls to the membership 
oracle for K. Then there is some convex body K for which 

B{K) ( cn \ n/2 
A(K) ~ Valogn J 

where c is an absolute constant. 

In particular, this implies that even achieving a 2°( n ) approximation requires 2 n ( n ) oracle calls. Now 
the volume of an M-ellipsoid E of K is clearly within a factor of 2°( n ) of the volume of K, thus Theorem 
11.11 gives a 2°^ algorithm that achieves this approximation. And, as claimed, we have a lower bound of 
2 Q ( n ) for computing an M-ellipsoid deterministically. We state this corollary formally. 

Theorem 1.3. There is a deterministic algorithm of time complexity (oracle calls and arithmetic operations) 
20(n) an( } p ly nom i a l space complexity that estimates the volume of a convex body given by a membership 
oracle to within a factor of2°^ n \ 

A natural question is whether this can be generalized to a trade-off between approximation and com- 
plexity. Indeed the following result of Barany and Furedi lfT7l gives a lower bound. 
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Theorem 1.4. HI 7\l For any < e < 1, any deterministic algorithm that estimates the volume of any input 
convex body to within a (1 + e) n given only a membership oracle to the body, must make at least Q,{l/e) n 
queries to the membership oracle. 

We show that the M-ellipsoid algorithm can be extended to give an algorithm that essentially matches 
this best possible complexity for centrally symmetric convex bodies. 

Theorem 1.5. For any < e < 1, there is a deterministic algorithm that computes a (1 + e) n approximation 
of the volume of a given centrally symmetric convex body in 0(l/e) n time and polynomial space. 

Next we turn to lattice problems. For a convex body K C W l , s.t. G interior (AT), the gauge function 
of if is 

\\x\\k = inf{s > : x G sK} 

for x G R n . For symmetric K (i.e. K = —K), \\ ■ ||x is a usual norm on W 1 (we shall refer to || • \\k as the 
norm induced by K and specify asymmetric whenever relevant). 

In recent work, M-ellipsoids were shown to be useful for solving basic lattice problems iTTTTl of SVP and 
CVP. The Shortest Vector Problem (SVP) is stated as follows: given an n-dimensional lattice L represented 
by a basis, and a norm defined by a convex body K, find a nonzero v G L such that 1 1 v \ \ k is minimized. In the 
Closest Vector Problem (CVP), in addition to a lattice and a norm, we are also given a query point x in W 1 , 
and the goal is to find a vector v G L that minimizes ||a; — v\\k. These problems are central to the geometry 
of numbers and have applications to integer programming, factoring polynomials, cryptography, etc. The 
fastest known algorithms for solving SVP under general norms, are 2°^ n > time randomized algorithms based 
on the AKS sieve |[T8l[l9l . Finding deterministic algorithms of this complexity for both SVP and CVP has 
been an important open problem. 

In fact, the AKS sieve uses an exponential amount of randomness. Improving on this, 11 1 1 1 gave a 

2 0(n) 

Las Vegas algorithm for general norm SVP which uses only a polynomial amount of randomness. For CVP 
the complexity was (2 + 7)°( n ) assuming the minimum distance of the query point is at most 7 times the 
length of the shortest vector. In subsequent work flZj . we gave a deterministic 0(log n) n algorithm for the 
same results. In this paper, we completely eliminate the randomness. In the statements below, we say that 
K is well-centered if vo\(K n —K) > 2~°( n )vol(i\~). (every convex body is well-centered with respect to 
its centroid or a point sufficiently close to its centroid). 

Theorem 1.6. Given a basis for a lattice L and a well-centered norm \\-\\k specified by a convex body K 
both in W 1 , the shortest vector in L under the norm \\.\\k can be found deterministically using 2°( n ) time 
and space. 

Theorem 1.7. Given a basis for a lattice L, any well-centered n-dimensional convex body K and a query 
point x in 1™, the closest vector in L to x in the norm \\.\\k defined by K can be computed deterministically 
using (2 + 7)°W time and space, provided that the minimum distance is at most 7 times the length of the 
shortest nonzero vector of L under \\-\\k- 

The approach in iTTTTl is to reduce the problem for general norms to the the Euclidean norm, or more 
specifically, to enumerating lattice points in ellipsoids. We describe summarize the reduction in Sec- 
tion [6] In lfTTi . the M-ellipsoid construction is a randomized polynomial-time algorithm based on the 
existence proof by Klartag ifTOTl . This approach is based on estimating a covariance matrix and seems 
inherently difficult to derandomize. In |[T2l . we gave a deterministic algorithm based on computing an 
approximate minimum mean-width ellipsoid. For this approximation, we get that the covering bound is 
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N(K, E)N(E, K) = 0(log n) n , giving a deterministic algorithm of this complexity. Here we completely 
algorithmicize Milman's existence proof, to obtain the best possible deterministic complexity of 2°^ n \ By 
adjusting the parameters in the resulting algorithm to "slow down" Milman's iteration, we get the optimal 
trade-off between approximation and complexity for volume computation. 



2 Techniques from convex geometry 
2.1 The Lewis ellipsoid 

Let a be a norm onnxn matrices. We define the dual norm a* for any S £ M. nxn as 

a*(S) = suj>{ti{SA) : A £ R nxn ,a{A) < 1}. (2.1) 
For a matrix A £ M nxn , we denote its transpose by A T , and its inverse (when it exists) by A -1 . 



Theorem 2.1. [20] For any norm a on R nxn , there is an invertible linear transformation A £ R nxn such 
that 

a(A) = 1 and a* (A' 1 ) = n. 

The proof of the above theorem is based on examining the properties of the optimal solution to the 
following mathematical program: 

maxdet(A) 
s.t. 

A £ R nxn (2 ' 2) 
a(A) < 1 

From here, showing that the optimal A satisfies a*{A^ x ) is a simple variational argument (reproduced in 
Lemma I4TT1). 

We will be interested in norms a of the following form. Let K C W 1 denote a symmetric convex body 
with associated norm [| • and let 7 n denote the canonical Gaussian measure on W 1 . We define the £-norm 
with respect to K for A £ R nxn as 

1/2 

£ K (A) = ( / \\Ax\\ 2 K dry n (x) 



The ^-norm was first studied and defined by Tomczak-Jaegermann and Figiel EH . 

The next crucial ingredient is a connection between the dual norm a* defined above and the £-norm with 
respect to the polar K* = {x £ W 1 : (x, y) < 1 Vy £ K}, namely, 

1/2 

l K *(A)=[ I \\Ax\\ 2 K *d ln {x) 



For two convex bodies K, L C M. n the Banach-Mazur distance between K and L is 

d BM (K, L) = inf{s : s > 1,TK C L - x Q sTK, x £ R n ,T £ R nxn invertible } 
Lemma 2.2. [8 J For A £ R nxn , we have that 

£ K *(A T ) < 4(l + logd BM (K,BZ))t K (A) 
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2.2 Covering numbers and volume estimates 

Let Q ^ n denote the n-dimensional Euclidean ball. Recall that N{K, D) is the number of translates of 
D required to cover K. The following bounds for convex bodies K, D C W 1 are classical. We use c, C to 
denote absolute constants here and later in the paper. 

Lemma 2.3. For any two symmetric convex bodies K, D, 

™W <iV(A-, D )< 3 » ™'<*> 



vol(K n D) ~ y 1 ' ~ vo l(if n D) ' 
The next lemma is from Il22l . 
Lemma 2.4. Let D C aK, a > 1. 77je?i, 

vol(conv{i<C,L>}) < 4anN(D,K)vol(K). 
The following are the Sudakov and dual Sudakov inequalities (see e.g., Section 6 of [23]). 
Lemma 2.5 (Sudakov Inequality). For any t > 0, and invertible matrix A G W lXn 

N{KMB%)<e c ^ A - T ^/ t2 . 
Lemma 2.6 (Dual Sudakov Inequality). For any t > 0, and A G M. nxn 

N(AB%,tK)<e clK ^ 2 / t2 . 
The following lemma gives a simple containment relationship (see e.g., lfT2l ). 
Lemma 2.7. For arcv A £ l nxn , i invertible, we have that 

1 



J -^ zr) KCAB;ct K (A)K 



Proof. We first show that E = AB% C £x_(A)K. Assume not, then there exists x £ E such that \\x\\k 
sup yf z K * \(y,x)\ > £r(A). Now picky G K* achieving |(y,x)| = \\x\\k- Then we have that 

£ K (A) < \(x,y)\ < sup \(z,y)\ = sup \(z,A?y)\ = P*y|| 2 

But now note that 

£ K (A) = E[\\AXf K ]h > E[\(y, AX)\ 2 \h = \\A*y\\ 2 

a clear contradiction. Therefore AB% C £k(A)K as needed. Now applying the same argument on F* 
A~ l B% and If *, we get that E* C From here via duality, we get that 



^ ( A -^K = {£ K *(A- V )K*T C = AS? 

as needed. □ 
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3 Algorithm for computing an M-ellipsoid 



In this section, we present the algorithm for computing an M-ellipsoid of an arbitrary convex body given 
in the oracle model. We first observe that it suffices to give an algorithm for centrally symmetric K. For 
a general convex body K, we may replace K by the difference body K — K (which is symmetric). An 
M-ellipsoid for K — K remains one for K, as the covering estimates changes by at most a 2°( n ) factor. To 
see this, note that for any ellipsoid E we have that N(K, E) < N(K — K, E) and that 

N(E, K) < N(E, K - K)N(K -K,K)< N(E, K - K)2° {n) , 

where the last inequality follows from the Rogers-Shephard inequality [24J, i.e. \o\{K — K) < 4 ra vol(-ftT). 

Our algorithm has two main components: a subroutine to compute an approximate Lewis ellipsoid for a 
norm given by a convex body, and an implementation of the iteration that makes this ellipsoid converge to 
an M-ellipsoid of the original convex body. 



3.1 Approximating the £-norm 

Our approximation of the Ik norm is as follows: 

i K {A)= ^wm\k. 

xe{-i,i} n 

The next lemma is essentially folklore, we give a known proof here. 
Lemma 3.1. For a symmetric convex body K and any A E R nxn , we have 

i K (A) < 4</|(l + log d BM (K, B2))t K (A). 

Proof. Let gi, . . . ,g n denote i.i.d. N(0, 1) Gaussians, let u%, . . . ,u n denote i.i.d. uniform {—1, 1} random 
variables and let Ai , . . . , A n G IR n denote the columns of A. Then we have that 

£ K (A) <4(l + logd B M(^,i? 2 n ))sup|^(^,y l ) :E[||^^||^]I < lj 

< 4^|(1 + log d BM (K,B%)) sup j^U.y;) : E[|| < lj 

< 4j|(l + \ogd BM {K,B%)) E[|| ^M^]3 = 4^|(1 + log d BM (K,B%)) i K (A) 



Here, the first inequality follows by Lemma 12.21 The next inequality follows from the classical compar- 
ison E[/(m, . . . , u n )] < E[/( gi, ■ ■ ■ , \/%9n)] for any convex function / : W 1 — > R, and setting 
f(x\, . . . , x n ) = || Yli x iUiWc- The last inequality follows from the following weak duality relation: 

J2(Ai,yi) = E[(J2u i A i ,J2u j y j )] < E[\\^2uiAi\\ K \\^2ujyj\\K*] 

i i j i j 

< E[|| Ys^Mlfi E[|| X>u,|&.]* < Ik(A). 

i j 

□ 
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The next lemma is a strengthening due to Pisier, using Proposition 8 from [25]. While it is not critical 
for our results (the difference is only in absolute constants), we use this stronger bound in our analysis. 

Lemma 3.2. For a symmetric convex body K and any A 6 R nxn , we have 

1 



=£ K (A) < i K (A) < Cl £ K (A) J 1 + log d BM (K,B% 



2 

where cq, c\ are absolute constants. Furthermore, by duality, we get that 

! ,t K {A)<t K (A)< x [^t{A). 



ciVl + log<Wif,£ 2 n ) V2 
3.2 A convex program 

To compute the approximate ^-ellipsoid we use the following convex program: 

maxdet(j4) ™ 
s.t. 

A^O 
Ik (A) < 1 



(3-1) 



Here the main thing we change is that we replace the ^-norm with &k. This will suffice for our purposes. 
We optimize over only positive semidefinite matrices (unlike Lewis' program [2T2b . This enables us to ensure 
convexity of program while maintaining the desired properties for the optimal solution. For convenience we 
use det(.) 1 /™ as the objective function and clearly this makes no essential difference. 

3.3 Main algorithm 

Given a convex body K, we put it in approximate John position using the Ellipsoid algorithm in polynomial 
time [4], so that BV[ C K C nB^ . We then use the above procedure, which is essentially an algorithmic 
version of Milman's proof of the existence of M-ellipsoids. In the description below, by log^ n we mean 
the i'th iterated logarithm, i.e., log^ n = 1, log** 2 * 1 n = log log n and so on. 



4 Analysis 

We note that the time complexity of the algorithm is bounded by poly(n)2°( n ) and the space complexity is 
polynomial in n. In fact, the only step that takes exponential time is the evaluation of the ^-norm constraint of 
the SDP This evaluation happens a polynomial number of times. The rest of computation involves applying 
the ellipsoid algorithm and computing oracles for successive bodies (for Ki+\ given an oracle for i-Q), both 
of which are fairly straightforward [4]. In particular, we build an oracle for the intersection of two convex 
bodies given by oracles and for the convex hull of two convex bodies given by oracles. The oracle for a 
body consists of a membership test and a bound on the ratio between two balls that sandwich the body. Our 
analysis below provides sandwiching bounds and the complexity of the oracle grows as n°w in the i'th 
iteration, for a maximum of n°' log * n ) = 2°( n \ 

We begin by showing that Lewis's bound (Theorem 12. II ) is robust to approximation and works when 
restricted to positive semi-definite transformations. This allows us to establish the desired properties for 
approximate optimizers of the convex program (I3.ll ). 
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M-ellipsoid. 

1. Let K\ = K and T = log* n 

2. For * = 1 . . . T - 1, 

(a) Compute an approximate ^-ellipsoid of Ki using the convex program (13.11) to get an approxi- 
mately optimal transformation A4 (the corresponding ellipsoid is AiB^). 

(b) Set 

Tin = , mT^f / „ x and r °«* = log W (w) ^-^ - . 
logW(n)^(^) V" 



(c) Define 



Xi+i = conv{iv"i n r out AiB2, r in A { Bl}. 



3. Output E = j- - Ar-ifff as the M-ellipsoid. 



Figure 1 : The M-Ellipsoid Algorithm 



Lemma 4.1. Le? iv" &e such that B^ C If C ni?2 a«d ^4 G M nxn , l?e a (1 - e) -approximate optimizer for 
the convex program < \ 3. 1 D , i.e. det(A)» > (1 — e)OPT. Then for e < l/36n 4 , we Ziave f/iaf 



^(A)^(^- 1 ) < n(l + 6n 2 ^) < 2n. 

Proof. For simplicity of notation, we write Ik{T) as <*(T) for T G M nxn . Take T G IR nxn (not necessarily 
positive semidefinite) satisfying a(T) < 1. Let \\T\\p = yjYUj ^ij denote the frobenius norm of T, and 
||T|| 2 = sup^g^n [|Tx[|2 denote the operator norm of T. 

Claim: a(T) < \\T\\ F < na(T). 

Proof. Let U denote a uniform vector in {—1, l} n . Since i ||x||2 < ||^||k f° r anv x 6 ^ n > we have that 

a(T) = E[\\UTf K ]h > -E[\\UT\\ 2 2 ] l 2 = h\T\\ F . 

n n 

Now using the inequality ||a;||x- < ||x||2 for x G M. n , a similar argument yields a(T) < \\T\\p. □ 
First note that I n /a{I n ) is a feasible solution to (13.11 ) satisfying 

in .A 1-1 1 



detf— ^r)n = —— > 



l a(I n ) a(I n ) \\I n \\F \fn 

Let Aopt ^ denote the optimal solution to (13 -lb - Since det (.Aopt) > we clearly have that Aopt >~ 
0. Therefore for 5 > small enough we have that Aopt + 5T ^ 0. From this, we see that (Aopt + 
5T)/a(A PT + ST) is also feasible for (fJD as a((A pp + £T)/a(A PT + AT)) = 1. S ince Aopt is 
the optimal solution, we have that 

det ( 

\a(A pT + 0T)J 
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Rewriting this and using the triangle inequality, 

det(Ao pt + ST)n < det(Aopr) ™cy(Aopt + ST) < det(Aopr)^ (&(Aopt) + Sa(T)) 
< det(A PT)~(l + S). 

Dividing by det (Aopt) " on both sides, we get that 

det(J n + 5A- l pT T)^ <1 + S. (4.1) 

Since both sides are equal at 6 = 0, we must have the same inequality for the derivatives with respect to 5 at 
0. This yields 

^tr(A OPT T) < 1 O tr(A OPT T) < n (4.2) 

Up to this point the proof is essentially the same as Lewis' proof of Theorem 12. II We now depart from that 
proof to account for approximately optimal solutions. 

Claim: H^prlb < n. 

Proof. Let a denote the largest eigenvalue of Aq PT and v G M n be an associated unit eigenvector. Since 
Aopt >~ 0, we have that Aq PT y 0, and hence a = 1 1 ^4 1 1 1 2 - Now note that Aopt + Svv T y for any 
8 > 0, and that a(vv T ) < ||iw T ||^ = \\v ||| = 1. Therefore by Equation ( 14.21 ), we have that 

n > tT(A~ l (vv T )) = tr(avv T ) = a 

as needed. □ 

Claim: A~ l < (1 + Q^)Aq 1 pt . 

Proof. Since A is (1 — e) -approximate maximizer to (13.11 ) we have that 

det(A)n > (1 - e) det(^oPT) " =>- det (A) > (1 - ne) det(A OPT ) 
We begin by proving by proving A y (1 — 3y / ne) J 4opT- Now note that 

Ah (I- 3y/ne)A PT & A~ PT AA~ PT y (1 - 3y/n~e)I n 

_ 1 _i 

Hence letting = A OPT AA OPT , it suffices to show that B y (1 — 3i/ne)J n . From here, we note that 

1 > det(-B) = det (A)/ det (^opt) > (1 - ne). Now from Equation (@~2]>, we have that 



tr(S) = tr(A OPT AA OPT ) = ti(AQ pT A) < 
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Let ai,...,a n denote the eigen values of B in non-increasing order. We first note that a n < 1 since 
otherwise 



det(B)=J[a i ><>! 
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a contradiction. Furthermore, since B y 0, we have that < a n < 1. So we may write a n = 1 — eo, for 
1 > eo > 0. Now since Ya=1 a i = ^(B) < n, by the arithmetic mean - geometric mean inequality we 
have that 



n— 1 n— 1 / 



n-1 



det(fl) =a n ]Ja i = (l- e ) J] ^ < (1 ~ e o) ( J < (1 - 6q)(1 + ^y)""' 



i=l i=l 



Using the inequality l + x<e x <l + x + Mar for x G [—1, 1], we get that 

(1 - eo )(l + ^T' 1 < (1 - eo)e eo < (1 - 6 )(1 + 6 + e -^el) 

= 1-— eg-— eg<l-— eg 

From this we get that 



3 _ e / 2 

1 —eg > det(J3) > (1 - ne) e < J- ne < 3y/nl 

Therefore cr n = 1 — eo > 1 — 3-y/rae =^ -B ^ (1 — 3\/ne)J n =J>4^(1- 3y / ne) J 4opT as needed. From 
here we get that 

A ~" ~ ( l-V^i ) A opt * C 1 + 6V^)^OPT 

for e < 1/ 36n, proving the claim. □ 

Now take T € M™ xri satisfying a(T) < 1. By the first claim, we note that \\T\\ F < na(T) < n. Now 
by Equation (14.2I ). we have that 



tr(i4 -1 T) = ti{A OPT T) +tx({A- 1 - Aq PT )T) < n+\\A~ x - Aq PT \\ f \\T\\ f < n + n\\A^ - A OPT \\ F 

We bound the second term using the previous claim. Since A^ 1 X (1 + 6A/^e)j4Qp T , we have that A^ 1 — 
Aqpt — 6y/neAQ PT , and hence 

WA' 1 - Aq PT \\ f < y/nWA' 1 - Aq PT \\ 2 < §ny/e\\AQ PT \\ 2 < 6n 2 y/e 

Using this bound, we get 

tr(-A -1 r) < n + 6n 3 Ve = "-(1 + 6n 2 y/e) 

for any T G W lXn satisfying a(T) < 1. Thus we get that a*^ 1 ) < n (l + 6n 2 ^/e). Together with the 
constraint a(A) < 1, the conclusion of the lemma follows. □ 

Theorem 4.2. Let A be a (1 — e) -approximate optimizer to the convex program A3. 1 D for e < l/(36n 4 ). 
Then 

@k(A)£k* {A~ x ) < CnlogI d BM (K,B%). 

for an absolute constant C > 0. 
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Proof. Using Lemma |4~T1 we have that 

iKiAyt^A- 1 ) < 2n. 
Next we use the approximation property ( Lemma [3T2T > of Ik to derive that 



i K {A)i K (A- 1 ) < Cn^J\ogd BM {K,B%)). 
Finally, noting that A~ T = A^ 1 (by symmetry of A), we apply Lemma f22\ to infer that 

which completes the proof. □ 

Next we turn to proving that the algorithm produces an M-ellipsoid. While the analysis follows the 
existence proof to a large extent, we need to handle the various approximations incurred. 

To aid in the analysis of Algorithm Q] on input K C W 1 , we make some additional definitions. Let 
di = logW n and T = log* n. Let K\, . . . , Kt and Ax,... , At denote the sequence of bodies and transfor- 
mations generated by the algorithm. Set Kf ut = K[ n = K, and for 1 < i < T — 1 define 

K™ x = conv{tfj n , rlAim K%\ = K?* n r^A^ 

where r\ n , r l out are defined as rj n , r out in the i'th iteration of the main loop in Algorithm Q] 
By construction, we have the relations 

K C K{ n C • • • C Kip, K D Kl ut D ■ ■ • D K T ut , K° ut C K t C iff Vi G [T] 

The proof of the main theorem will be based on the following inductive lemmas which quantify the 
properties of the sequences of bodies defined above. 

Lemma 4.3. Mi G [T], we have that d BM {Ki,B%) < CQog^ n)l. 

7 

Proof. For the base case, we have that d B M(Kx, BV[ ) < yn < C n5 f° r an Y constant C > 1. 
For the general case, by construction of Ki + i we have that 

rl n A t B^ C C r^fl?. 

Therefore, 

d BM (K i+1 ,B2) < rlJr\ n 

= aflK^A-^iK^/n 

< Cxa^KfiA-^iK^A^/n (by Lemma [32} 

< d (logW n ) 2 (log d BM (K h B%))i. (by Lemma [42]) 

Using the fact that log^(n) > 1, Vi G [T — 1], a direct computation shows that the above recurrence 
equation implies the existence of a constant C > 1 (depending only on C\) such that the stated bound on 
d BM (K i+1 ,B2) holds. " □ 
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Lemma 4.4. For i £ [T — 1], we ftave that 



max 



V0l(^l) | <eC n/logWn 

vol(if?^)' vol(if| n ) J - 



Proof. By Lemma 12731 the fact that A'° u * C i^, Lemma 12751 Lemma [3721 and Lemma 14731 we have that 



vol(K° ut ) 
vol(K-f) 



< NiK^^AB?) < N(Ki,r l out AiB%) 



By Lemma l277ll3.2l and l4.3i we see that 

Next by Lemma 12741 the fact that C if]"", Lemma [2761 Lemma [3721 and Lemma 14731 we have that 



Y0\(K\ n ) 

< Cinh c{iK ^ )r ™ )2 = C in ie CnlK ^ )2/iailK ^ ))2 

< C 1 nh Cn]as ( dBM ( Ki > B W/ a i < Cinle c ' n(1/log(i)n) < e Cn/ log(i> n 



We are now ready to complete the proof. 
Proof, (of Theorem ll.il ) By construction of Kt, we note that 

rJ-'Ar^B- C Kt Q r T ^A T - X B% 

where by Lemma FOl we have that r^Z 1 / rf~ 1 = O(l). Therefore the returned ellipsoid = ^ 

(last line of Algorithm Q]) satisfies that 

^E<ZK T <Z CE 



for an absolute constant C > 1. Next by Lemma 1231 we have that 
Now we see that 

KQK^Q CKft E C CET T C C2i$*, 

and that 
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Therefore 

max{vol(if),vol(E)} < 2n vol(iffi) 
vol(K HE) ~ vol(K° ut ) ' 

Finally, by Lemma |4~41 we have that 

XgKgg) = TT VOl ^+l) ™KK° Ut ) < TT 2Cn/log(^ n = 2 0(«) 

vol(.KJP*) il vol(ETf) vol(iq^) ~ W 

Combining the above inequalities yields the desired guarantee on the algorithm. The time complexity is 
2°( n \ dominated by the time to evaluate the ^x-norm. The space is polynomial since all we need to maintain 
are efficient oracles for the successive bodies K{, which can be done space-efficiently for the operations of 
intersection and convex hull used in the algorithm (H. □ 

5 An asymptotically optimal volume algorithm 

As noted in the introduction, the result of Theorem II .31 a deterministic 2° ( n ) -approximation for volume, 
follows directly from Theorem ll.il In this section, we show how to modify our M-ellipsoid algorithm (based 
on Milman's iteration) to match this lower bound algorithmically. 

In the M-ellipsoid algorithm of the previous section, we construct a series of convex bodies Kq = 
K,Ki, . . . , Kt such that the covering numbers N(K, K T ) and N(K T , K) are bounded by 2°^ and the 
final body Kt has d B M(KT, B%) < C for some constant C. Our modification will construct a similar 
sequence of bodies, but rather than bounding covering numbers, we will ensure that 

e- Cen vol(K) < vol(K T ) < e Cen vo\(K) 

and 

d BM (K T ,B2)<C Hl/ 2 e)2 . 

Then we approximate the volume of Kt by finding an approximate ^-ellipsoid E for it, and covering it with 
translations of a maximal parallelopiped that fits in eE. Since this covering will consist of disjoint paral- 
lelopipeds, and their union will be contained in Kt + eE C (1 + s)Kt, we get the desired approximation. 
Here is the precise algorithm. 

Proof of Theorem 1731 Let at = log^ n. As in Lemma l4~3l we bound the Banach Mazur via the following 
recurrence 

d BM (K l+1 ,B2) < rl ut /rl n < C^ll (i og (0 {n) f (i og d BM {K h B^)) § . 
From the above recurrence a direct computation reveals that for V i € [T], 

d BM (Ki,B2) < g ln (iA) 5/2 (log( ,-i) (n)) | 

We now show that the volumes of the Ki bodies changes very slowly. This will enable us to conclude 
that the volume of Kt is very close to the volume of K. 
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VolumeC-fT, e). 

1. Let K\ = K and T = log* n 

2. For * = 1 . . . T - 1, 

(a) Compute an approximate ^-ellipsoid of Ki using the convex program (13.11) to get an approxi- 
mately optimal transformation A4 (the corresponding ellipsoid is AiB^)- 

(b) Set 

6^ , _ C^/U^\og^{n)i Kt {A*) 

and r ou t 



(c) Define 

K i+l = conv{*Q n r out AiB2, r in AiB^}. 

3. Compute the ellipsoid E = t^At-iB^ and a maximum volume parallelopiped P inscribed in E (via 
the principal components of At-x). 

4. Cover Kt with disjoint copies of eP. Output fcvol(P) where k is the number of copies used. 



Figure 2: Deterministic Volume Algorithm 
By Lemmas 12.71 13.2l and the above bound on dBAi(Ki, B%), we have that 



y/\n(l/e) log w (n) 



and that 



' out /± i n 2 ~ 7= /i i- D 2 — < ~ / 7= ^ 1 i- L '2 



€\ n e\/n evra 



Therefore if e < C/V", then = canv{rj n AjBJ , 1*Q n r^A^} = K { . Since this holds for all 

i € [T - 1], we get that K T = K and hence vol(i£r) = vol (If). 

Now assume that e > C/y/n. Then for i G [T — 1], using Lemmas |2. 3 1 and [231 we have, 



volCfTi+i) > vo\(Ki n routB^' 

YO\{Kj) 

N(K u rl ut B2) 



> 



> e -C(eyin(l/e))nlogd BM (K t ,B2)/a2 vol ( K ^ 
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From the above, we get that 



T— 1 T—l 
VQHKt) _ TT VOl{K i+1 ) yr C ne /l og M( n ) > -Cue 

vol(A) 11 vol(Ki) " 11 
Next via Lemma [2~4l the above containment, and Lemma [231 we have, 

vol(K l+1 ) < vol(conv {Ki,r in B^}) 

< C(e^)niV(r i „S 2 ™,K i )vol(A^) 

< C{en^)e c ^ lK ^\o\{Ki) 

< C( en f)e c(e2/ln(1/e)) " logdsM( ^' i? 2 n)/a ?vol(iv" i ) 

< C(eni)e Cne / los<l) ( n )vol(K i )- 

From this, we get that 

V°K K t) _ TT VOl(K i+1 ) 3 .i og . (n ) TT Cne/logW(n) < Cne 

vol(K) 11 vo i(^.) - ^ 11 - 

where the above holds as long as e = Q( lo s ra ^°g " ) (which we have by assumption). 
Combining the above inequalities, we get 

e- Cen vo\(K) < vol(K T ) < e Cen vol(K). 

Let E denote the final ellipsoid computed by the algorithm, and let P denote a maximimum volume 
inscribed parallelipiped of E. By construction of E and Kt, we have that E C Kt Q C y V — 
Therefore the covering produced is contained in Kt + eP C ify + eE C (1 + c)Kt- Hence the estimate 
found by the algorithm lies between vol(ifx) and vol((l + e)Kx) = (1 + e) n vol(i^T)- Thus the overall 
approximation factor is bounded by e Cne as desired. 

Next we bound the size of the covering found by the algorithm in Step 4. Noting that vol(E) = 
2°( n ) V ol(P), the size of the covering is bounded by 

vol(A [+ eP) < (i + e r=f^ < c-d + < + «ran(v«r /«t = (v,)°<"». 

VOl^^J VOl(P) VOl(£/j 

Finally, we describe the enumeration procedure that will ensure that the time bound is (l/e)°( n ) and the 
space used is polynomial in n. The number of parallelopipeds enumerated could be as high as (l/e) 0( - n \ 
However, we do not need to store all the copies that intersect K, we only need the number. To do this using 
polynomial space, we start with a parallelopiped inside K designated as the root and fix an order on its axes. 
For every other parallelopiped in the axis-aligned tiling, designate its parent to be an adjacent node closer to 
the root in Manhattan distance along the axes of the parallelopiped (i.e., the usual L\ distance for the centers 
of the parallelopipeds after transforming parallelopipeds to cuboids), breaking ties using the ordering on 
coordinates. This ensures that a depth-first traversal of the tree defined by this structure takes time linear 
in the number of nodes in the traversal and space linear in the dimension. This is a special case of a more 
general space-efficient traversal technique studied by Avis and Fukuda [26l. □ 
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6 Applications to lattice problems 



We now consider the consequences of our deterministic M-ellipsoid algorithm for lattice problems, in par- 
ticular, the shortest vector problem (SVP) and closest vector problem (CVP) in any norm. Dadush et al iPTO 
who gave reductions from SVP and CVP any norm to the case of Euclidean norm, or more specifically, to 
the problem of enumerating all lattice points in an ellipsoid. This special case was solved in 2°^> time for 
both SVP and CVP by Micciancio and Voulgaris (271, using an approach specific to the Euclidean norm. 
The key idea of the reduction was to cover a suitable scaling of the convex body K defining the norm by 
2°(™) translations of its M-ellipsoid. The scaling s > is such that sK n L / and f K n L = 0. At 
this scaling, a simple volume argument shows that any uanslation of sK contains no more than 2°( n ) lattice 
points. To enumerate lattice points in sK, the idea is to cover sK using translations of an ellipsoid E, and 
then to enumerate lattice points in each of these ellipsoids. The number of points in any of the ellipsoids is 
easily bounded by the number of translations of sK required to cover E times the number of points in any 
translation of sK, i.e., N(sK, E)N(E, sK); this is precisely the number that is bounded by 2°^ for an M- 
ellipsoid. Thus, the complexity of the algorithm is 2°( n ) plus the complexity of computing an M-ellipsoid. 
The approach for CVP is similar. We now state the reduction precisely. For a lattice L and convex body K 
in W 1 , let G(K, L) be the largest number of lattice points contained in any translate of K, i.e., 

G(K,L) = max\(K + x)r[L\. (6.1) 
The main result of [ 1 Q can be stated as follows. 

Theorem 6.1. Hll\l Given any convex body K C W 1 along with an ellipsoid E ofK and any n-dimensional 
lattice L C W 1 , the set K n L can be computed in deterministic time G(K, L) ■ N(K, E)N(E, K) ■ 2°( n \ 

For an M-ellipsoid E of K, the numbers N(K, E) and N(E, K) are both bounded by 2°( n ). 
From Theorem ll.il we obtain a simple corollary. 

Corollary 6.2. Given any convex body K C W 1 and any n-dimensional lattice L C W 1 , the set K n L can 
be computed deterministically in time G(K, L) ■ 2°( n \ 

For SVP in any norm, as showin in [11], a simple packing argument shows that G{\\K, L) = 2°( n \ 
where Ai = inf^ \\x\\ k, the length of the shortest nonzero vector in L, thus implying Theorem ll.6l Similarly, 
for CVP in any norm G( 7 AiK,L) = (2 + 7 )°( n ),where 7 is the ratio between the minimum distance of the 
query point to the lattice and the length of the shortest nonzero vector; this gives Theorem 11.71 Both these 
bounds on G(K, L) can be found in ifTTl . 

It remains open to solve CVP deterministically in time 2°^ with no assumptions on the minimum dis- 
tance. Even the special case of CVP under the L ro norm is open. 

Acknowledgements. We are very grateful to Assaf Naor and Grigoris Paouris for helpful pointers and 
discussions, specifically for showing us the proofs of Lemmas [3.11 and [3721 
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